This alert examines a pattern observed in the field: the management system that retains documents and certificates, but no longer corresponds to operations. The cut-off is May 2026. The reading combines verifiable signals in records with two official case records: environmental projects for which remote or document review proved insufficient in Germany, and irregular type-approval tests documented by the Japanese authority. The cases do not prove that all certification fails; they show why paperwork is not enough.
Operational definition of the pattern
A decorative system retains formal documentation, but that documentation no longer reflects operations. The external audit may fail to notice the gap if the sample focuses on prepared records and does not follow the process through to its results. The pattern is confirmed by converging evidence, not by an isolated signal.
The pattern does not allow intent to be inferred. It may arise from inertia: operations change, procedures do not, and the review confirms the document's existence without testing its use. It may also coexist with deliberate fraud. The auditor distinguishes between the two scenarios and records only what the evidence supports.
The five signals · what to request and what they reveal
These signals allow early detection of where to expand the sample. They also serve management: each indicates what to request and which hypothesis must be corroborated before reaching a conclusion.
| Signal | What to request | What it reveals |
|---|---|---|
| 01 · The stored-away manual | The nonconformity control procedure — asking the operator who carries out the process, at the workstation | Silence, or a search through the system to find it · documentation with no operational use |
| 02 · Indicators with metrics but no action | The corrective actions associated with repeated deviations in the indicator dashboard | Deviation recorded, decision absent. The dashboard exists for the sake of existing |
| 03 · Internal audits without findings | The reports from the last three internal audit cycles | General compliance where any competent supervisor would list observations in five minutes · documentary formality |
| 04 · A five-line management review | The latest management review minutes | Generic decisions. No owner, no deadline, no follow-up metric |
| 05 · Closures without verification | The effectiveness verification for three closed corrective actions | What was closed yesterday is reopened tomorrow. The closure was administrative |
Two official case records
The case records are not equivalent to a complete decorative certified system. They contribute something more limited and useful: they show verification failures when documentary evidence is accepted without sufficient cross-checking against operations.
UER projects in Germany. In 2024, Agencia Federal de Medio Ambiente rejected the release of certificates for eight projects in China due to irregularities. Seven applications were withdrawn after the authority confronted the holders with legal and technical objections and announced on-site verifications. The agency itself concluded that remote review using satellite images or documentary checks of reports were insufficient to detect and prove the abuse.
Daihatsu type approvals in Japan. Ministerio de Tierra, Infraestructura, Transporte y Turismo documented irregularities in type-approval applications, ordered shipments to be suspended, carried out inspections and revoked type approval for three models in January 2024. The official record allows the sequence to be traced from the company's statement to the administrative measure; it does not require a news article to complete the case.
The mechanism that allows prepared evidence and deviations in operations to coexist is explored in Criterion 11. What matters here is the institutional consequence: a review that does not cross-check the record against the process leaves the blind spot intact.
Three forms of institutional harm
Loss of organisational learning
A living system teaches. Detected nonconformities, verified corrective actions and substantive management reviews build institutional capacity. The decorative system shuts down that cycle. The organisation pays the full maintenance cost and receives zero learning benefit.
False sense of control
Management signing off the annual review receives the information the decorative system produces — everything under control, indicators green, audits without observations. With that information, management stops making decisions · it believes decisions are unnecessary. The problems exist. They operate outside the documented system, where no one records them.
The certificate does not explain the incident
When a failure occurs, the organisation needs to reconstruct decisions, controls and corrections. A valid certificate attests to an assessment within a scope and at a given date; it does not, on its own, explain what happened. If the system's records do not allow that reconstruction, the limitation is exposed before clients, regulators or courts.
The availability test
Request the list of nonconformities with effectiveness verification, the main operational risks with assigned owners and a measurable improvement from the previous period. Ask for the source records, not a presentation prepared for the meeting.
Delays, generalities or a lack of correspondence with operations are signals to expand the review. Rapid availability does not, on its own, prove that the system is effective, nor does a delay prove that it is decorative. The verdict comes from the content and its traceability.
The certificate serves its purpose within the assessed scope. Operational evidence demonstrates what happened afterwards.